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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the 
application. 

Listing of Claims; 

1 . (Currently Amended) A data storage device performing input/output of classified data 
in accordance with predetermined input/output procedures for protection of said classified data, 
and storing said classified data, comprising: 

an interface portion externally exchanging data; 

a first storage portion storing said classified data; and 

a second storage portion storing log information related to the input/output of said 
classified data according to said predetermined input/output procedures and an address 
representing a storage position of said classified data to be input/output in said first storage 
portion, wherein 

said log information includes: 

an identification code identifying said classified data to be input/output, and 

a first status information representing a state of storage of said classified data to be 
input/output in said first storage portion^ 

said data storage device further comprising a control portion co ntrolling the input/output 
of said classified data, wherein 

said first storage portion fiirther stores a flag, corresponding to said classified data, 
indicating whether said classified data can be used or not, and 

said control portion determines the state of storage of said clas sified data to be 
input/output in said first storage portion according to comparison of an identification code of 
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classified data stored at a storage position in said first storage po rtion specified by said address 
with an identification code stored in said second storage portion, and a state of said flag 
corresponding to said classified data to be input/output . 

2. (Currently Amended) The data storage device according to claim 1, further 
comprising: 

a control portion controlling the input/output of said clasoifiod data, wherein 
said control portion operates in accordance with said predetermined input/output 
procedures to receive said identification code and said address of said classified data to be 
input/output via said interface portion, and to store said identification code and said address in 
said second storage portion, and operates in response to [[a]] an output request of said log 
information externally applied via said interface portion to determine [[the]] saM state of storage 
of paid classifiod data in said firot otorago portion based on said identification code and s aid 
address stored in said second storage portion , and to renew said first status information based on 
fjniH state of storag e to the determined state of storage . 

3. (Previously Presented) The data storage device according to claim 2, wherein 
said log information further includes a second status information recording a status of 

progression of said predetermined input/output procedures relating to the input/output of said 

classified data to be input/output, and 

said control portion renews said second status information in accordance with the 

progression of said predetermined input/output procedures. 
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4. (Previously Presented) The data storage device according to claim 2, wherein 
said log information further includes procedure specifying information specifying said 

predetermined input/output procedures, and 

said control portion renews said procedure specifying information in response to every 
new obtaining of said procedure specifying information. 

5. (Previously Presented) The data storage device according to claim 4, further 
comprising: 

a cipher communication portion operating in accordance with said predetermined 
input/output procedures to establish a cipher communication path to a supplier or a receiver of 
said classified data via said interface portion, and to receive or transmit said classified data via 
said established cipher commvmication path, wherein 

in an input procedure included in said predetermined input/output procedures for 
receiving and storing said classified data, 

said cipher communication portion receives said classified data in accordance with said 
input procedure, and 

said control portion receives said address via said interface portion, stores said received 
address in said second storage portion, and stores said classified data received by said cipher 
communication portion in a storage position on said first storage portion specified by said 
received address. 

6. (Previously Presented) The data storage device according to claim 5, wherein 
in said input procedure, 
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said cipher communication portion produces a first session key, and 

said control portion renews said procedure specifying information with said first session 

key in response to every production of said first session key by said cypher cipher 

communication portion. 

7. (Previously Presented) The data storage device according to claim 5, further 
comprising: 

a signing portion producing a signed log information prepared by affixing an electronic 
signature to said log information or a part of said log information, wherein 

in a re-input procedure included in said predetermined input/output procedures for 
resuming said input procedure when said input procedure is interrupted, 

said control portion renews said first status information included in said log information 
stored in said second storage portion, obtains said log information from said second storage 
portion and applies said log information to said signing portion, 

said signing portion receives said log information including said renewed first status 
information to produce said signed log information, and 

said cipher communication portion transmits said signed log information produced by 
said signing portion via said established cipher communication path in accordance with said re- 
input procedure. 

8. (Previously Presented) The data storage device according to claim 5, wherein 
in an output procedure included in said predetermined input/output procedures for 
externally outputting said classified data stored in said first storage portion, 
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said control portion receives said address via said interface portion, stores said received 
address in said second storage portion, obtains said classified data from the storage position on 
said first storage portion specified by said received address, and applies said classified data to 
said cipher communication portion, and 

said cipher communication portion transmits said classified data received from said 
control portion in accordance with said output procedure. 

9. (Previously Presented) The data storage device according to claim 8, wherein 
in said output procedure, 

said cipher communication portion receives an externally produced second session key, 

and 

said control portion renews said procedure specifying information with said received 
second session key in response to every reception of said second session key by said cipher 
communication portion. 

10. (Previously Presented) The data storage device according to claim 8, further 
comprising: 

a log certifying portion verifying and certifying externally applied signed log information, 
wherein 

in a re-output procedure included in said predetermined input/output procedures for 
restiming said output procedure when said output procedure is interrupted, 

said cipher communication portion receives and applies said signed log information to 
said log certifying portion in accordance with said re-output procedure, 
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said log certifying portion verifies said signed log information received from said cipher 
communication portion, and 

said control portion determines whether said output procedure is interrupted or not, based 
on said log information stored in said second storage portion and said received signed log 
information when said received signed log information is certified; determines whether the 
storage position on said first storage portion specified by said address stored in said second 
storage portion can be restored to the storage state before interruption of said output procedure or 
not, when it is determined that said output procedure is interrupted; restores said storage position 
to the storage state attained before interruption of said output procedure, and resumes said 
interrupted output procedure, when it is determined that the restoring is possible. 

1 1 . (Previously Presented) The data storage device according to claim 2, wherein 
said classified data includes said identification code peculiar to said classified data, and 
said control portion determines the storage state of said classified data in said first storage 

portion by specifying said classified data in accordance with said identification code included in 
said classified data stored in the storage position on said first storage portion specified by said 
address. 

12. (Previously Presented) The data storage device according to claim 1 1 , wherein 
in an input procedure included in said predetermined input/output procedures for 

receiving said classified data via said interface portion and storing said classified data in said 
first storage portion, 

said control portion interrupts said input procedure without storing said classified data in 
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said first storage portion when mismatch occurs between the identification code included in said 
received classified data and the identification code included in said log information. 

13. (Previously Presented) The data storage device according to claim 1 1 , wherein 
in an output procedure included in said predetermined input/output procedures for 

outputting said classified data stored in said first storage portion via said interface portion, 

said control portion interrupts said output procedure without outputting said classified 
data when the identification code included in said classified data stored in the storage position on 
said first storage portion specified by said address does not match with the identification code 
included in said log information. 

14. (Previously Presented) The data storage device according to claim 2, further 
comprising: 

a signing portion producing signed data for said log information, and producing signed 
log information by affixing said produced signed data to said log information, wherein 

in a re-input procedure performed for resuming an input procedure for receiving said 
classified data via said interface portion and storing said classified data in said first storage 
portion, when said input procedure is interrupted, 

said control portion outputs said signed log information produced by said signing portion 
via said interface portion. 

15. (Previously Presented) The data storage device according to claim 14, further 
comprising: 



WDC99 1599377-1.070456,0056 



8 



10/506,505 

a log certifying portion verifying and certifying an additional signed log information 
prepared by affixing a signed data for an additional log information of said receiver to said 
additional log information, and received from said receiver of said classified data via said 
interface portion, wherein 

in a re-output procedure performed for resuming an output procedure for outputting said 
classified data stored in said first storage portion via said interface portion, when said output 
procedure is interrupted, 

said log certifying portion verifies correctness of said additional signed log information 
received from the receiver of said classified data in said interrupted output procedure, and 

said control portion interrupts said re-output procedure, when said additional signed log 
information is not certified, or when said additional signed log information is certified and it is 
determined based on said additional signed log information and said log information stored in 
said second storage portion that said output procedure is not interrupted. 

16. (Previously Presented) The data storage device according to claim 1 , wherein 
said classified data is a decryption key for decrypting and using encrypted content data, 

and 

said data storage device further comprises a third storage portion storing said encrypted 
content data. 
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